CVE-2026-88029

CVE-2026-88029 is a query-operator injection vulnerability in the GridFS component of the MongoDB Python Driver . An improper neutralization of special elements in data query logic allows a caller-supplied structured file identifier to be interpreted as a query condition rather than a literal ide...

CVE-2026-106435

The MongoDB Python Driver contains an out-of-bounds read vulnerability in its binary accelerator. This occurs when an application decodes malformed BSON containing a truncated regular-expression element missing a trailing NUL byte. An attacker who can supply BSON to the decode or decode_all APIs ...